View a markdown version of this page

Actions, resources, and condition keys for AWS Tiros - Service Authorization Reference

Actions, resources, and condition keys for AWS Tiros

AWS Tiros (service prefix: tiros) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Actions defined by AWS Tiros

AWS Tiros has no API operations that can be used in the Actions element of an IAM policy statement.

Permission-only actions for AWS Tiros

The following actions are defined by AWS Tiros but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions Description Resource types (*required) Condition keys Access level

CreateQuery

Grants permission to create a VPC reachability query

Write

ExtendQuery

Grants permission to extend a VPC reachability query to include the calling principals account

Write

GetQueryAnswer

Grants permission to get VPC reachability query answers

Read

GetQueryExplanation

Grants permission to get VPC reachability query explanations

Read

GetQueryExtensionAccounts

Grants permission to list accounts that might be useful in a new query

Read

Resource types defined by AWS Tiros

AWS Tiros does not support specifying a resource ARN in the Resource element of an IAM policy statement.

Condition keys for AWS Tiros

AWS Tiros has no service-specific condition keys that can be used in the Condition element of policy statements.